Skip to content

chore(deps): update all non-major dependencies - #627

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

chore(deps): update all non-major dependencies#627
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented May 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Age Confidence
anchore/syft minor 1.44.0 → 1.51.0 age confidence
base64 workspace.dependencies minor 0.22 → 0.23 age confidence
git2 workspace.dependencies minor 0.20 → 0.21 age confidence
lucide-react (source) dependencies minor 1.14.0 → 1.31.0 age confidence
mockall workspace.dependencies minor 0.14 → 0.15 age confidence
sqlx workspace.dependencies minor 0.8 → 0.9 age confidence
syft tools minor 1.44.0 → 1.51.0 age confidence
tokio-tungstenite dependencies minor 0.29.0 → 0.30.0 age confidence
tokio-tungstenite workspace.dependencies minor 0.29.0 → 0.30.0 age confidence
tungstenite dependencies minor 0.29.0 → 0.30.0 age confidence
tungstenite workspace.dependencies minor 0.29.0 → 0.30.0 age confidence

Release Notes

anchore/syft (anchore/syft)

v1.51.0

Compare Source

Added Features
Bug Fixes
  • Cleanup snap temporary directories [PR #​5117 @​spiffcs]
  • add correct CPE vendor/product candidates for Git for Windows PE binary [PR #​5156 @​westonsteimel]
  • javascript-package-cataloger creates phantom <name>@unknown packages for subpath or export-map stub package.json files [Issue #​5118]
  • Syft generates incorrect PURLs for legacy JARs missing Maven metadata, causing Grype false negatives [Issue #​4598] [PR #​5146 @​ankit090701]
  • When scanning an image, syft only reports one file per set of hardlinks, leading to wrong SPDX packageVerificationCode [Issue #​5019] [PR #​5029 @​wagoodman]
  • Support deno binary latest and some old versions [Issue #​5057] [PR #​5084 @​ychampion]
  • Update install methods in README.md [Issue #​3198]
Dependencies

9 dependency changes (9 updated). 2 vulnerabilities remediated.

🟢 Remediated (2)

Updated (9 packages)
  • github.com/diskfs/go-diskfs v1.9.3 → v1.9.4
  • github.com/go-git/go-billy/v5 v5.9.0 → v5.9.1
  • github.com/go-git/go-git/v5 v5.19.1 → v5.19.2 (🟢 remediated GHSA-hc8v-wwc9-vgxm, GHSA-qgq7-7hm3-q39j)
  • github.com/jedib0t/go-pretty/v6 v6.8.1 → v6.8.3
  • github.com/klauspost/compress v1.19.0 → v1.19.1
  • github.com/magiconair/properties v1.8.10 → v1.18.11
  • github.com/ulikunitz/xz v0.5.15 → v0.5.16
  • go.yaml.in/yaml/v3 v3.0.4 → v3.0.5
  • modernc.org/sqlite v1.54.0 → v1.55.0

(Full Changelog)

v1.50.0

Compare Source

Added Features
Bug Fixes
Additional Changes
Dependencies

14 dependency changes (14 updated). 1 vulnerability remediated.

🟢 Remediated (1)

Updated (14 packages)
  • github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 → v1.32.0
  • github.com/cncf/xds/go v0.0.0-ee656c7 → v0.0.0-dba9d58
  • github.com/envoyproxy/go-control-plane/envoy v1.36.0 → v1.37.0
  • github.com/envoyproxy/protoc-gen-validate v1.3.0 → v1.3.3
  • github.com/gpustack/gguf-parser-go v0.24.1 → v0.25.0
  • go.opentelemetry.io/contrib/detectors/gcp v1.39.0 → v1.43.0
  • google.golang.org/genproto/googleapis/api v0.0.0-9d38bb4 → v0.0.0-afd174a
  • google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3b → v0.0.0-afd174a
  • google.golang.org/grpc v1.80.0 → v1.82.1 (🟢 remediated GHSA-hrxh-6v49-42gf)
  • modernc.org/cc/v4 v4.28.4 → v4.29.0
  • modernc.org/ccgo/v4 v4.34.4 → v4.34.6
  • modernc.org/gc/v3 v3.1.3 → v3.1.4
  • modernc.org/libc v1.73.4 → v1.74.1
  • modernc.org/sqlite v1.53.0 → v1.54.0

(Full Changelog)

v1.49.0

Compare Source

Added Features
Bug Fixes
Dependencies

16 dependency changes (16 updated).

Updated (16 packages)
  • github.com/anchore/go-rpmdb v0.1.0 → v0.2.0
  • github.com/anchore/stereoscope v0.2.2 → v0.3.0
  • github.com/containerd/containerd/v2 v2.3.2 → v2.3.3
  • github.com/docker/cli v29.5.3+incompatible → v29.6.1+incompatible
  • github.com/gkampitakis/go-snaps v0.5.22 → v0.5.23
  • github.com/moby/moby/api v1.54.2 → v1.55.0
  • github.com/moby/moby/client v0.4.1 → v0.5.0
  • github.com/pelletier/go-toml/v2 v2.3.1 → v2.4.3
  • golang.org/x/crypto v0.53.0 → v0.54.0
  • golang.org/x/mod v0.37.0 → v0.38.0
  • golang.org/x/net v0.56.0 → v0.57.0
  • golang.org/x/sync v0.21.0 → v0.22.0
  • golang.org/x/sys v0.46.0 → v0.47.0
  • golang.org/x/term v0.44.0 → v0.45.0
  • golang.org/x/text v0.38.0 → v0.40.0
  • golang.org/x/tools v0.47.0 → v0.48.0

(Full Changelog)

v1.48.0

Compare Source

Added Features
Bug Fixes
Dependencies

9 dependency changes (8 updated, 1 added).

Updated (8 packages)
  • github.com/bmatcuk/doublestar v1.3.1 → v8.8.8
  • github.com/klauspost/compress v1.18.6 → v1.19.0
  • golang.org/x/tools v0.46.0 → v0.47.0
  • modernc.org/cc/v4 v4.28.2 → v4.28.4
  • modernc.org/ccgo/v4 v4.34.0 → v4.34.4
  • modernc.org/gc/v3 v3.1.2 → v3.1.3
  • modernc.org/libc v1.72.3 → v1.73.4
  • modernc.org/sqlite v1.51.0 → v1.53.0
Added (1 package)
  • howett.net/plist v1.0.1

(Full Changelog)

v1.46.0

Compare Source

Added Features
Bug Fixes
Dependencies

34 dependency changes (31 updated, 3 added). 5 vulnerabilities remediated.

🟢 Remediated (5)

Updated (31 packages)
  • github.com/ProtonMail/go-crypto v1.4.0 → v1.4.1
  • github.com/anchore/bubbly v0.2.0 → v0.2.1
  • github.com/anchore/clio v0.1.0 → v0.1.1
  • github.com/anchore/fangs v0.1.0 → v0.1.1
  • github.com/anchore/go-collections v0.1.0 → v0.1.1
  • github.com/anchore/go-homedir v0.1.0 → v0.1.1
  • github.com/anchore/go-logger v0.1.0 → v0.1.1
  • github.com/anchore/go-lzo v0.1.0 → v0.1.1
  • github.com/anchore/go-macholibre v0.1.0 → v0.1.1
  • github.com/anchore/go-make v0.5.0 → v0.8.0
  • github.com/anchore/go-struct-converter v0.1.0 → v0.2.0-rc2
  • github.com/anchore/go-sync v0.1.0 → v0.1.1
  • github.com/anchore/stereoscope v0.2.1 → v0.2.2
  • github.com/charmbracelet/colorprofile v0.4.1 → v0.4.3
  • github.com/clipperhouse/displaywidth v0.10.0 → v0.11.0
  • github.com/clipperhouse/uax29/v2 v2.6.0 → v2.7.0
  • github.com/containerd/containerd/v2 v2.3.1 → v2.3.2 (🟢 remediated GHSA-33vj-92qq-66hc, GHSA-cvxm-645q-p574, GHSA-jpcc-p29g-p8mq, GHSA-rgh6-rfwx-v388, GHSA-xhf5-7wjv-pqxp)
  • github.com/docker/cli v29.4.3+incompatible → v29.5.3+incompatible
  • github.com/google/go-containerregistry v0.21.6 → v0.21.7
  • github.com/jedib0t/go-pretty/v6 v6.7.10 → v6.8.1
  • github.com/mattn/go-runewidth v0.0.19 → v0.0.21
  • github.com/spdx/tools-golang v0.5.7 → v0.6.0-rc4
  • github.com/sylabs/sif/v2 v2.24.0 → v2.24.1
  • golang.org/x/crypto v0.52.0 → v0.53.0
  • golang.org/x/mod v0.36.0 → v0.37.0
  • golang.org/x/net v0.55.0 → v0.56.0
  • golang.org/x/sync v0.20.0 → v0.21.0
  • golang.org/x/sys v0.45.0 → v0.46.0
  • golang.org/x/term v0.43.0 → v0.44.0
  • golang.org/x/text v0.37.0 → v0.38.0
  • golang.org/x/tools v0.45.0 → v0.46.0
Added (3 packages)
  • github.com/piprate/json-gold v0.7.0
  • github.com/pquerna/cachecontrol v0.0.0-1555304
  • github.com/tailscale/hujson v0.0.0-ecc657c

(Full Changelog)

v1.45.1

Compare Source

Bug Fixes

(Full Changelog)

v1.45.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

marshallpierce/rust-base64 (base64)

v0.23.1

Compare Source

  • Make the tests build again on non-SIMD architectures

v0.23.0

Compare Source

  • Added more consts for preconfigured configs and engines
  • Make DecodeError::InvalidLastSymbol more clear by including the decoded value
  • Added SIMD-accelerated engines behind the default-on simd-unsafe feature: Simd picks the best
    instruction set at runtime (AVX2 on x86_64, NEON on aarch64) and falls back to the scalar
    GeneralPurpose engine, while Avx2 and Neon target one instruction set with no runtime
    detection and work in no_std. The engines support the standard and URL-safe alphabets.
  • Update MSRV to 1.71.0
  • Add support for custom padding symbols
rust-lang/git2-rs (git2)

v0.21.0

Compare Source

0.20.4...main

Added
  • Added experimental SHA256 repository support behind the new unstable-sha256 Cargo feature,
    along with *_ext API variants that accept an ObjectFormat.
    #​1206
  • Added opts::set_cache_max_size() and opts::get_cached_memory().
    #​1188
  • Added Repository::object_format() and a new ObjectFormat enum.
    #​1204
  • Added Repository::set_config().
    #​1208
  • Added merge_file() along with MergeFileInput.
    #​1210
  • Added Repository::refdb_compress() for packing loose refs.
    #​1221
  • Added public Refdb type, along with Repository::refdb() and Repository::set_refdb(). Repository::refdb_compress() now delegates to Refdb::compress().
    #​1228
  • Added Revspec::into_objects().
    #​1230
  • Added BlameHunk::final_committer(), BlameHunk::orig_committer(), BlameHunk::summary(), and BlameHunk::summary_bytes().
    #​1231
  • Implemented Clone for Reference.
    #​1233
  • Added Repository::author_from_env() and Repository::committer_from_env().
    #​1237
  • Added impl From<Utf8Error> for Error.
    #​1239
Changed
  • ❗ The ssh, https, and cred Cargo features are no longer enabled by default.
    Previously default = ["ssh", "https"]; now default = [].
    Enable them explicitly if you rely on credential helpers or transport support.
    #​1168
  • ❗ CredentialHelper and the url dependency are now gated behind the new cred Cargo feature.
    Enabling ssh or https transitively enables cred.
    #​1168
  • ❗ Updated to the 2021 edition.
    #​1173
  • ❗ Many string accessors that previously returned Option<&str>
    now return Result<&str, Error> or Result<Option<&str>, Error>,
    so callers can distinguish a missing value from a non-UTF-8 one.
    #​1241
  • ❗ BlameHunk::final_signature, BlameHunk::final_committer, BlameHunk::orig_signature, and BlameHunk::orig_committer
    now return Option to avoid segfaults when signature information is missing.
    #​1254
  • Bumped requirement to libgit2-sys 0.18.4, which updates libgit2 to 1.9.3.
    #​1242
Fixed
  • Fixed MergeOptions::skip_reuc() to use the correct GIT_MERGE_SKIP_REUC flag.
    #​1194
  • Repository::submodules() now returns an Error when the underlying git_submodule_lookup() call to libgit2 fails, rather than panicking with a failed assertion.
    #​1220
  • Reference::is_valid_name() now propagates errors from CString conversion instead of panicking.
    #​1229
  • Fixed Remote::list() to return an empty list instead of erroring
    when the remote advertises no refs.
    #​1250
  • ReferenceNames now returns an Err for non-UTF-8 branch names instead of panicking.
    #​1239
Documentation
  • Added note regarding potentially confusing behavior of git_checkout_head.
    #​1149
  • Added comments describing the IndexAddOption flags.
    #​1163
  • Updated README note about the ssh feature.
    #​1187
  • Improved function docs for Repository::tag_foreach().
    #​1190
  • Fixed doc comment typo in StatusOptions.
    #​1199
  • Fixed missing period in module documentation.
    #​1219
  • Small wording fix in Signature::from_raw_const() docs.
    #​1222
  • Replaced discussion of missing gist in README.
    #​1223
  • Documented the bitflag methods for checking flags.
    #​1224
  • Clarified CheckoutBuilder::update_index() documentation.
    #​1232
  • Added more missing documentation.
    #​1235
  • Fixed typo in Repository::stash_save_ext() docs.
    #​1245
  • Added example showing retrieval of the latest commit for a file.
    #​1243
  • Replaced comma with period in CheckoutBuilder::refresh() docs.
    #​1252
Internals
  • Dropped civet/conduit from dev-dependencies.
    #​1170
  • Updated dependencies.
    #​1171
  • Fixed lockfile verification in CI.
    #​1177
  • Updated CI and documentation to cover feature combinations.
    #​1182
  • Listed all examples that may need HTTP and SSH.
    #​1196
  • Allowed publishing from any ref in the publish workflow.
    #​1198
  • Bumped time from 0.3.41 to 0.3.47.
    #​1215
  • Added end-to-end test for branch name on initialization.
    #​1244
  • Added end-to-end test for stash count.
    #​1246
  • Added end-to-end tests demonstrating use of Repository::statuses().
    #​1251
  • Internal refactors preparing for experimental SHA256 OID support.
    #​1201
    #​1205
lucide-icons/lucide (lucide-react)

v1.31.0

Compare Source

v1.30.0

Compare Source

v1.29.0: Version 1.29.0

Compare Source

What's Changed

Full Changelog: lucide-icons/lucide@1.28.0...1.29.0

v1.28.0

Compare Source

v1.27.0: Version 1.27.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.26.0...1.27.0

v1.26.0

Compare Source

v1.25.0

Compare Source

v1.24.0: Version 1.24.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.23.0...1.24.0

v1.23.0: Version 1.23.0

Compare Source

What's Changed

New Contributors

Full Changelog: lucide-icons/lucide@1.22.0...1.23.0

v1.22.0

Compare Source

[

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Sao_Paulo)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label May 10, 2026
@renovate
renovate Bot requested a review from hcavarsan as a code owner May 10, 2026 05:08
@hcavarsan

hcavarsan commented May 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codecov

codecov Bot commented May 10, 2026

Copy link
Copy Markdown

Bundle Report

Bundle size has no change ✅

@codecov

codecov Bot commented May 10, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from 1ba59a2 to 1bbd19a Compare May 11, 2026 11:02
@renovate renovate Bot changed the title chore(deps): update rust crate png to 0.18 chore(deps): update all non-major dependencies May 11, 2026
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies chore(deps): update all non-major dependencies - autoclosed May 13, 2026
@renovate renovate Bot closed this May 13, 2026
@renovate
renovate Bot deleted the renovate/all-minor-patch branch May 13, 2026 01:23
@renovate renovate Bot changed the title chore(deps): update all non-major dependencies - autoclosed chore(deps): update all non-major dependencies May 15, 2026
@renovate renovate Bot reopened this May 15, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 5139d5b to b9b5bdd Compare May 18, 2026 20:53
@renovate

renovate Bot commented May 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: Cargo.lock
Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path Cargo.toml --workspace
error: failed to parse manifest at `/tmp/renovate/repos/github/hcavarsan/kftray/Cargo.toml`

Caused by:
  the cargo feature `profile-rustflags` requires a nightly version of Cargo, but this is the `stable` channel
  See https://doc.rust-lang.org/book/appendix-07-nightly-rust.html for more information about Rust release channels.
  See https://doc.rust-lang.org/cargo/reference/unstable.html#profile-rustflags-option for more information about using this feature.
File name: Cargo.lock
Command failed: cargo update --config net.git-fetch-with-cli=true --manifest-path crates/kftray-server/Cargo.toml --workspace
error: failed searching for potential workspace
package manifest: `/tmp/renovate/repos/github/hcavarsan/kftray/crates/kftray-server/Cargo.toml`
invalid potential workspace manifest: `/tmp/renovate/repos/github/hcavarsan/kftray/Cargo.toml`

help: to avoid searching for a non-existent workspace, add `[workspace]` to the package manifest

Caused by:
  failed to parse manifest at `/tmp/renovate/repos/github/hcavarsan/kftray/Cargo.toml`

Caused by:
  the cargo feature `profile-rustflags` requires a nightly version of Cargo, but this is the `stable` channel
  See https://doc.rust-lang.org/book/appendix-07-nightly-rust.html for more information about Rust release channels.
  See https://doc.rust-lang.org/cargo/reference/unstable.html#profile-rustflags-option for more information about using this feature.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from a489156 to a349610 Compare May 21, 2026 18:42
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from d1ce0ce to dcb4a07 Compare June 2, 2026 22:03
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from dcb4a07 to 7d97847 Compare June 5, 2026 16:44
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from c866c48 to 71ab43d Compare June 18, 2026 11:08
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from c7f63ed to 138c600 Compare July 1, 2026 21:13
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 949e1c1 to 8c3be15 Compare July 12, 2026 09:53
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 1b29434 to 72dac78 Compare July 23, 2026 18:10
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 58467ed to 0e4246e Compare July 30, 2026 08:37
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 91707b2 to bb862d3 Compare August 9, 2026 16:45
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch from bb862d3 to 8e5affb Compare August 10, 2026 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@hcavarsan hcavarsan Awaiting requested review from hcavarsan hcavarsan is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@hcavarsan